Karim Kanso Faron Moller Anton Setzer Automated Verification of Signalling Principles in Railway Interlocking Systems. 19-31 2009 250 Electr. Notes Theor. Comput. Sci. 2 http://dx.doi.org/10.1016/j.entcs.2009.08.015 db/journals/entcs/entcs250.html#KansoMS09